共收录 5534 条相关情报。
← 返回所有主题CVE-2026-106450
### Summary `LZ4FrameInputStream` allocates two new buffers of the frame's maximum block size, up to 4 MiB each, every
CVE-2026-105647
### Impact A validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user
CVE-2026-105648
### Impact A validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user
CVE-2026-94544
Pending `use cache` fills are shared across requests for the same key without distinguishing Draft Mode requests from re
CVE-2026-94543
Self-hosted Next.js applications that use the Pages Router with statically generated (SSG) or incrementally regenerated
CVE-2026-94485
In Next.js App Router applications built with webpack, metadata image routes such as opengraph-image and twitter-image i
CVE-2026-94484
Next.js applications that use a root-level catch-all page together with statically generated or Incremental Static Regen
CVE-2026-84897
src/internal.c in wolfSSL wolfSSH through 1.5.0 admits the server-to-client Diffie-Hellman group exchange messages SSH_M
CVE-2026-106061
A flaw was found in GIMP’s X cursor (XMC) thumbnail loader. When GIMP generates a thumbnail for a crafted XMC file, it a
CVE-2026-81535
In wolfSSH through 1.5.0 built with --enable-fwd, DoChannelOpen() in src/internal.c gates only direct-tcpip channel open
CVE-2026-83742
Unsigned integer underflow in wstrncat() in src/port.c in wolfSSL wolfSSH from v1.4.11 through v1.5.0 on non-Windows pla
CVE-2026-93448
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to
CVE-2026-93679
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to cause a denial of service due to un
CVE-2026-97671
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to
CVE-2026-101329
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to
CVE-2026-65122
NVIDIA TensorRT contains a vulnerability where an attacker can cause an out of bounds read. A successful exploit of this
CVE-2026-106585
In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decom
CVE-2026-106552
In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be written to unintended loca
CVE-2026-19029
A heap-based buffer over-read in H5Z__filter_scaleoffset() in src/H5Zscaleoffset.c in HDF5 through 2.2.0 lets an attacke
CVE-2026-104046
A flaw was found in SSSD (System Security Services Daemon). When Identity Provider (IdP) authentication is enabled, pre-